Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
File:                     olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json)
Hash identifier:          q+epstuBMcIEsiV5OqNLKQAoFyghG0XWjbe49HTNiQU=
Subject key identifier:   51:4E:34:69:A3:D2:24:84:5C:F0:77:50:B9:F1:01:01:D1:45:F9:6A
Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA
Certificate issuer:       /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
Certificate serial:       05D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
Manifest number:          05D3
Signing time:             Fri 22 Aug 2025 23:12:21 +0000
Manifest this update:     Fri 22 Aug 2025 23:12:21 +0000
Manifest next update:     Fri 29 Aug 2025 23:12:21 +0000
Files and hashes:         1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: EUwxVwwZ1IyhVVEYdMd0P2FB95lnUiYzuJjuWNiRB9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl
                          rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C738, serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
        Validity
            Not Before: Aug 22 23:12:21 2025 GMT
            Not After : Aug 29 23:12:21 2025 GMT
        Subject: CN=68a8f955-abed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:df:75:2b:90:71:d7:6f:9d:58:33:42:5a:
                    f2:46:f8:85:3c:49:a2:3b:1f:3f:57:62:4c:85:26:
                    95:5c:74:b4:bc:80:8b:96:91:95:0f:12:8d:04:e6:
                    b9:9d:34:1b:fa:30:f2:8c:11:88:d3:30:97:e6:d9:
                    05:08:0c:1a:7a:30:1e:d9:91:b8:3a:b0:9e:96:42:
                    b7:7e:e6:02:8f:f6:b9:cf:1e:e8:62:d2:b0:e8:db:
                    13:8a:fe:91:75:25:2c:29:df:f6:fc:5a:ae:6c:4b:
                    c7:82:4f:7a:07:d5:d6:5a:a6:33:a6:e6:7f:f3:bb:
                    f4:a7:43:9a:51:86:4c:eb:d6:bb:51:72:3d:3e:e2:
                    80:92:6d:d3:28:e8:99:e8:3c:36:fd:09:1c:f7:48:
                    be:dc:65:55:f2:aa:b7:48:e6:ff:33:19:93:cd:69:
                    f6:6b:6c:f0:a1:e5:c8:dd:bc:04:6a:f9:d4:0b:e2:
                    b7:a0:43:84:99:b4:91:85:d1:d2:83:e9:8b:5e:56:
                    77:d1:14:3d:2a:7b:1a:4e:60:a0:5d:9f:e7:4e:60:
                    35:62:b0:f1:7e:ed:55:c0:63:96:8a:82:23:89:19:
                    3d:7f:33:53:59:8b:ac:6f:da:d3:28:47:ff:fb:81:
                    be:62:dc:bd:ac:7b:3b:76:06:95:24:dc:c4:31:83:
                    af:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4E:34:69:A3:D2:24:84:5C:F0:77:50:B9:F1:01:01:D1:45:F9:6A
            X509v3 Authority Key Identifier:
                keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:cc:2b:20:f6:f3:4b:c7:c8:dc:74:35:6e:f9:22:56:bb:b3:
         05:d5:de:f7:d3:42:0c:00:cd:4c:1a:fb:4a:6f:62:9c:aa:69:
         03:7d:d0:dc:47:ab:5a:9a:84:44:ce:fd:31:9d:3e:13:e5:62:
         bf:af:26:20:d5:21:5a:74:7d:23:2d:34:b5:c3:37:cc:9d:07:
         2e:f8:e1:26:95:f0:92:16:0e:78:a6:95:d0:a2:1e:53:e1:0b:
         5e:88:b2:28:5a:80:a0:bf:3a:59:45:b9:07:49:ff:fe:24:8d:
         98:8a:43:5f:34:1d:5d:90:66:01:28:c4:db:9f:da:f2:6c:34:
         35:ec:48:76:99:91:5f:af:fd:29:1a:88:68:b9:49:73:f8:c2:
         23:ea:0a:2e:fc:29:2a:bc:dd:20:85:d2:d6:7e:03:9d:d4:7c:
         9e:f1:a0:f2:dd:bc:cf:a1:cb:46:1a:03:db:1a:f9:cd:85:e2:
         8b:7c:8b:5c:2d:34:09:58:c9:f0:67:da:d8:a2:7f:3b:05:58:
         15:e4:df:fd:46:3b:5f:c9:77:03:52:52:61:ea:1a:12:9d:31:
         bd:0b:8b:48:c8:58:e9:35:eb:f0:d4:3f:a4:52:7f:60:d7:96:
         7b:d8:4a:70:9a:f5:97:65:25:01:3f:8f:27:b5:18:9e:0c:9f:
         2c:ae:7e:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM3MzgxMTAvBgNVBAUTKEEyNUJERjc2M0YwQkE2M0M0OUEzNzZBQkY5NkU1NTUw
ODc5RTg1QkEwHhcNMjUwODIyMjMxMjIxWhcNMjUwODI5MjMxMjIxWjAYMRYwFAYD
VQQDEw02OGE4Zjk1NS1hYmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwmjfdSuQcddvnVgzQlryRviFPEmiOx8/V2JMhSaVXHS0vICLlpGVDxKNBOa5
nTQb+jDyjBGI0zCX5tkFCAwaejAe2ZG4OrCelkK3fuYCj/a5zx7oYtKw6NsTiv6R
dSUsKd/2/FqubEvHgk96B9XWWqYzpuZ/87v0p0OaUYZM69a7UXI9PuKAkm3TKOiZ
6Dw2/Qkc90i+3GVV8qq3SOb/MxmTzWn2a2zwoeXI3bwEavnUC+K3oEOEmbSRhdHS
g+mLXlZ30RQ9KnsaTmCgXZ/nTmA1YrDxfu1VwGOWioIjiRk9fzNTWYusb9rTKEf/
+4G+Yty9rHs7dgaVJNzEMYOv0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFONGmj
0iSEXPB3ULnxAQHRRflqMB8GA1UdIwQYMBaAFKJb33Y/C6Y8SaN2q/luVVCHnoW6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zQkYwQUU5Q0M5
RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBqeEpvM2FyLVc1VlVJZWVo
Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29sdmZkajhMcGp4Sm8zYXItVzVWVUllZWhiby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzczOC8zQkYwQUU5Q0M5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBq
eEpvM2FyLVc1VlVJZWVoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2zCsg9vNLx8jcdDVu+SJWu7MF1d7300IMAM1MGvtKb2KcqmkDfdDc
R6tamoREzv0xnT4T5WK/ryYg1SFadH0jLTS1wzfMnQcu+OEmlfCSFg54ppXQoh5T
4QteiLIoWoCgvzpZRbkHSf/+JI2YikNfNB1dkGYBKMTbn9rybDQ17Eh2mZFfr/0p
GohouUlz+MIj6gou/CkqvN0ghdLWfgOd1Hye8aDy3bzPoctGGgPbGvnNheKLfItc
LTQJWMnwZ9rYon87BVgV5N/9RjtfyXcDUlJh6hoSnTG9C4tIyFjpNevw1D+kUn9g
15Z72EpwmvWXZSUBP48ntRieDJ8srn5b
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:18:32 2025 by rpki-client